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ABSTRACT OF THE DISCLOSURE 

An architecture provides the ability to create and maintain multiple instances of 
virtual servers, such as virtual filers (vfilers), within a server, such as a storage appliance. 
A vfiler is a logical partitioning of network and storage resources of the storage appliance 

5 platform to establish an instance of a multi-protocol server. Each vfiler is allocated a 
subset of dedicated units of storage resources, such as volumes or logical sub- volumes 
(qtrees), and one or more network address resources. Each vfiler is also allowed shared 
access to a file system resource of a storage operating system. To ensure controlled ac- 
cess to the allocated and shared resources, each vfiler is further assigned its own security 

10 domain for each access protocol. A vfiler boundary check is performed by the file sys- 
tem to verify that a current vfiler is allowed to access certain storage resources for a re- 
quested file stored on the filer platform. 
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